Since 30 July, roughly 2,000 BTC — about $130 million at current prices — has been drained out of Coldcard hardware wallets. No phishing, no malware, no stolen laptop. These devices never touch the internet, and nobody touched them.
Source: [Dev.to](https://dev.to/sergeipalii/the-audit-confirmed-the-generator-existed-it-did-and-it-was-never-called-1kai)